Difference between revisions of "ITunes"

From WPKG | Open Source Software Deployment and Distribution
Jump to: navigation, search
(Updated Applicationsupport to 2.0.1)
(Updated to ITunes 10.5, updated configuration section, removed Quicktime)
Line 1: Line 1:
 
= General Information =
 
= General Information =
Apple iTunes is primarily a program to play different types of media, but it is also required if you want to backup an IPhone or sync your emails, notes, bookmarks etc over USB with your PC. ITunes comes bundled with multiple sub programs that are all automatically installed when running the regular ITunes setup wizard. However depending on your use case you don't actually need all of them. Therefore this page is divided into two subparts: On the one hand a full blown ITunes installation (excluding Apple Software Update) when you actually want to use ITunes and Quicktime as an audio and video player, image viewer, podcast streamer, etc and on the other hand a minimal ITunes installation if you only want to use it to snc/backup an IPhone.
+
Apple iTunes is primarily a program to play different types of media, but it is also required if you want to backup an IPhone or sync your emails, notes, bookmarks etc over USB with your PC. ITunes comes bundled with multiple sub programs that are all automatically installed when running the regular ITunes setup wizard. However depending on your use case you don't actually need all of them. Therefore this page is divided into two subparts: On the one hand a full blown ITunes installation (excluding Apple Software Update) when you actually want to use ITunes as an audio and video player, podcast streamer, etc and on the other hand a minimal ITunes installation if you only want to use it to sync/backup an IPhone.
  
ITunes is one of the programs that are more difficult to package, since Apple is using it as a vehicle to distribute their other software. To get rid of at least some of those "extra" programs additional configuration steps are necessary to perform.
+
ITunes is one of the programs that are more difficult to package, since Apple is using it as a vehicle to distribute their other software. To get rid of at least some of those "extra" programs additional configuration steps are necessary to perform. Please read the instructions carefully, because some things here dont work as you would assume. Don't blindly copy and paste the XML code.
  
 
= Pre-Setup Process =
 
= Pre-Setup Process =
Line 8: Line 8:
 
* Download the ITunes setup file from Apple (usually called iTunesSetup.exe)
 
* Download the ITunes setup file from Apple (usually called iTunesSetup.exe)
 
* Open the file with 7zip or another file archiver
 
* Open the file with 7zip or another file archiver
* Extract iTunes.msi, QuickTime.msi, AppleApplicationSupport.msi and AppleMobileDeviceSupport.msi
+
* Extract iTunes.msi, AppleApplicationSupport.msi and AppleMobileDeviceSupport.msi
  
 
== Notes ==
 
== Notes ==
* Apple Mobile Device Support is only necessary if you want to connect an Ipod or IPhone. Quicktime and Apple Application Support are mandatory to be able to run ITunes.
+
* Starting with ITunes version 10.5, Quicktime is not part of the setup package anymore and also not necessary any longer to run ITunes. The installation instructions were therefore removed from this page.
 +
* Apple Mobile Device Support is only necessary if you want to connect an Ipod or IPhone. Apple Application Support is mandatory to be able to run ITunes.
 
* Each sub-application has its own version. When a new version for ITunes comes out, you will need to extract the MSI packages from the EXE installer, right click on the MSI files and check their version to see which sub-applications have updated. Each sub-applications has its own WPKG package definition with separate install, upgrade and uninstall commands.
 
* Each sub-application has its own version. When a new version for ITunes comes out, you will need to extract the MSI packages from the EXE installer, right click on the MSI files and check their version to see which sub-applications have updated. Each sub-applications has its own WPKG package definition with separate install, upgrade and uninstall commands.
 
* To also get the latest available version of Apple Application Support you'll have to download every installer from the Apple website and check which one contains the latest version of the Apple Application Support.
 
* To also get the latest available version of Apple Application Support you'll have to download every installer from the Apple website and check which one contains the latest version of the Apple Application Support.
 
* Apple sometimes updates the MSI packages inside the EXE installer '''without''' changing the version number on the website. So do not take it for granted that there are no new packages available just because the version number on the website is still the same.
 
* Apple sometimes updates the MSI packages inside the EXE installer '''without''' changing the version number on the website. So do not take it for granted that there are no new packages available just because the version number on the website is still the same.
 
* Apple is also known to sometimes modify the setup packages of their programs even at minor version changes, so do not blindly assume that a new ITunes installer will work the same way as the old one did!
 
* Apple is also known to sometimes modify the setup packages of their programs even at minor version changes, so do not blindly assume that a new ITunes installer will work the same way as the old one did!
* '''Warning''': The version of Quicktime that is bundled with ITunes is '''not''' necessarily the newest version available and may contain known security flaws. For example ITunes 9.2.1.5 contained Quicktime 7.66, although Quicktime 7.67 had already been released since weeks at that time. Quicktime 7.66 has a highly critical security flaw that allows for remote execution of arbitrary code, simply by visiting a webpage ([http://secunia.com/advisories/40729 secunia.com]). If you encounter such a scenario, you will have to download the standalone Quicktime installer from Apple and extract the file QuickTime.msi from there. Alternatively you can use the minimal ITunes installation method below, which removes the Quicktime browser plugin and thereby mitigates the attack surface.
+
* There is a 64bit version of ITunes available too. As of version 10.5.0.142 the 64bit installer contains 64bit versions of ITunes itself and Apple Mobile Device Support and 32bit versions of Apple Application Support. The package definitions for the 64bit versions look basically the same as below, just the paths and GUIDs are different.
* There is a 64bit version of ITunes available too. As of version 10.4.0.80 the 64bit installer contains 64bit versions of ITunes itself and Apple Mobile Device Support and 32bit versions of Quicktime and Apple Application Support. The package definitions for the 64bit versions look basically the same as below, just the paths and GUIDs are different.
+
  
 
= Full iTunes 10.4.0.80 installation in VBS =
 
= Full iTunes 10.4.0.80 installation in VBS =
Line 45: Line 45:
 
'Copy this to notepad++ or anoter editor, save as *.vbs :-)
 
'Copy this to notepad++ or anoter editor, save as *.vbs :-)
  
= Full ITunes installation 10.4.0.80 =
+
= Full ITunes installation 10.5.0.142 =
''If you update this code, please remember the GUIDs change on each new version installed!''
+
''If you update this code, please remember the uninstall GUIDs change on each new version installed!''
  
 
Deploy File/Folder Structure
 
Deploy File/Folder Structure
 
   %SOFTWARE%\itunes\iTunes.msi
 
   %SOFTWARE%\itunes\iTunes.msi
  %SOFTWARE%\itunes\QuickTime.msi
 
 
   %SOFTWARE%\itunes\AppleMobileDeviceSupport.msi
 
   %SOFTWARE%\itunes\AppleMobileDeviceSupport.msi
 
   %SOFTWARE%\itunes\AppleApplicationSupport.msi
 
   %SOFTWARE%\itunes\AppleApplicationSupport.msi
Line 56: Line 55:
 
<source lang="xml">
 
<source lang="xml">
 
<?xml version="1.0" encoding="UTF-8"?>
 
<?xml version="1.0" encoding="UTF-8"?>
<package id='appleapplicationsupport' name='Apple Application Support' revision='2.0.1' reboot='false' priority='10'>
+
<package id='appleapplicationsupport' name='Apple Application Support' revision='%PKGVER%' reboot='false' priority='10'>
<check type='registry' condition='equals' path='HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6A3F9D74-BB80-4451-8CA1-4B3A857F1359}\DisplayVersion' value='1.5.2' />
+
<variable name='PKGVER' value='2.1.5' />
 +
 
 +
<check type='uninstall' condition='versiongreaterorequal' path='Apple Application Support' value='%PKGVER%'/>
 
   
 
   
 
<install cmd='msiexec /i "%SOFTWARE%\itunes\AppleApplicationSupport.msi" /passive /norestart' timeout='300'>
 
<install cmd='msiexec /i "%SOFTWARE%\itunes\AppleApplicationSupport.msi" /passive /norestart' timeout='300'>
Line 63: Line 64:
 
<exit code='3010' reboot='postponed' />
 
<exit code='3010' reboot='postponed' />
 
</install>
 
</install>
+
 
+
 
<upgrade cmd='msiexec /i "%SOFTWARE%\itunes\AppleApplicationSupport.msi" /passive /norestart' timeout='300'>
 
<upgrade cmd='msiexec /i "%SOFTWARE%\itunes\AppleApplicationSupport.msi" /passive /norestart' timeout='300'>
 
<exit code='0' />
 
<exit code='0' />
Line 70: Line 70:
 
</upgrade>
 
</upgrade>
 
   
 
   
<remove cmd='msiexec /x{6A3F9D74-BB80-4451-8CA1-4B3A857F1359} /passive /norestart' timeout='300'>
+
<remove cmd='msiexec /x{A83279FD-CA4B-4206-9535-90974DE76654} /passive /norestart' timeout='300'>
 
<exit code='0' />
 
<exit code='0' />
 
<exit code='1605' />
 
<exit code='1605' />
Line 77: Line 77:
 
</package>
 
</package>
  
<package id='applemobilesupport' name='Apple Mobile Device Support' revision='3.4.1.2' reboot='false' priority='10'>
+
<package id='applemobilesupport' name='Apple Mobile Device Support' revision='%PKGVER%' reboot='false' priority='10'>
<check type='registry' condition='equals' path='HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C23CD6DA-1958-43A5-ADD0-59396572E02E}\DisplayVersion' value='3.4.1.2' />
+
<variable name='PKGVER' value='4.0.0.96' />
 +
 
 +
<check type='uninstall' condition='versiongreaterorequal' path='Apple Mobile Device Support' value='%PKGVER%' />
 
   
 
   
 
<install cmd='msiexec /i "%SOFTWARE%\itunes\AppleMobileDeviceSupport.msi" /passive /norestart' timeout='300'>
 
<install cmd='msiexec /i "%SOFTWARE%\itunes\AppleMobileDeviceSupport.msi" /passive /norestart' timeout='300'>
Line 89: Line 91:
 
<exit code='3010' reboot='postponed' />
 
<exit code='3010' reboot='postponed' />
 
</upgrade>
 
</upgrade>
<remove cmd='msiexec /x{C23CD6DA-1958-43A5-ADD0-59396572E02E} /passive /norestart' timeout='300'>
 
<exit code='0' />
 
<exit code='1605' />
 
<exit code='3010' reboot='postponed' />
 
</remove>
 
</package>
 
  
<!-- Do not use Quicktime 7.69.80.9 which is bundled in the installation package of Itunes 10.4.0.80 because it contains known security flaws -->
+
<remove cmd='msiexec /x{A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21} /passive /norestart' timeout='300'>
<package id='quicktime' name='Apple QuickTime' revision='7.70.80.34' reboot='false' priority='10'>
+
<check type='uninstall' condition='exists' path='QuickTime' />
+
<check type='file' condition='versiongreaterorequal' path='%PROGRAMFILES%\QuickTime\QuickTimePlayer.exe' value='7.70.80.34' />
+
+
<install cmd='msiexec /i "%SOFTWARE%\itunes\QuickTime.msi" SCHEDULE_ASUW=0 /passive /norestart' timeout='300'>
+
<exit code='0' />
+
<exit code='3010' reboot='postponed' />
+
</install>
+
+
<upgrade cmd='msiexec /i "%SOFTWARE%\itunes\QuickTime.msi" SCHEDULE_ASUW=0 /passive /norestart' timeout='300'>
+
<exit code='0' />
+
<exit code='3010' reboot='postponed' />
+
</upgrade>
+
+
<remove cmd='msiexec /x{C9E14402-3631-4182-B377-6B0DFB1C0339} /passive /norestart' timeout='300'>
+
 
<exit code='0' />
 
<exit code='0' />
 
<exit code='1605' />
 
<exit code='1605' />
Line 118: Line 99:
 
</package>
 
</package>
  
 +
<package id='itunes' name='Apple iTunes' revision='%PKGVER%' reboot='false' priority='9'>
 +
<depends package-id='appleapplication' />
  
<package id='itunes' name='Apple iTunes' revision='10.4.0.80' reboot='false' priority='9'>
+
<variable name='PKGVER' value='10.5.0.142' />
<check type='uninstall' condition='exists' path='iTunes' />
+
 
<check type='file' condition='versiongreaterorequal' path='%PROGRAMFILES%\iTunes\iTunes.exe' value='10.4.0.80' />
+
<check type='uninstall' condition='versiongreaterorequal' path='iTunes' value='%PKGVER%' />
 +
<!-- Check if automatic updates have been disabled (value: 256) and settings have been locked (value: 1) -->
 +
<check type='registry' condition='equals' path='HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default\AdminFlags' value='257' />
 
   
 
   
 
<install cmd='msiexec.exe /i "%SOFTWARE%\itunes\iTunes.msi" SCHEDULE_ASUW=0 /passive' timeout='300'>
 
<install cmd='msiexec.exe /i "%SOFTWARE%\itunes\iTunes.msi" SCHEDULE_ASUW=0 /passive' timeout='300'>
Line 127: Line 112:
 
<exit code='3010' reboot='postponed' />
 
<exit code='3010' reboot='postponed' />
 
</install>
 
</install>
 +
<!-- Disable automatic update of ITunes via parental controls and lock the settings, see below for more info -->
 
<install cmd='reg add "HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default" /v "AdminFlags" /t REG_DWORD /d "0x101" /f' timeout='60' />
 
<install cmd='reg add "HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default" /v "AdminFlags" /t REG_DWORD /d "0x101" /f' timeout='60' />
 
   
 
   
Line 135: Line 121:
 
<upgrade cmd='reg add "HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default" /v "AdminFlags" /t REG_DWORD /d "0x101" /f' timeout='60' />
 
<upgrade cmd='reg add "HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default" /v "AdminFlags" /t REG_DWORD /d "0x101" /f' timeout='60' />
 
   
 
   
<remove cmd='msiexec.exe /x{C73CA646-73B3-4AEF-A136-C37505745174} /passive /norestart' timeout='300'>
+
<remove cmd='msiexec.exe /x{29ED20C9-5E15-4969-9279-25BF3727A3DA} /passive /norestart' timeout='300'>
 
<exit code='0' />
 
<exit code='0' />
 
<exit code='1605' />
 
<exit code='1605' />
Line 144: Line 130:
 
</source>
 
</source>
  
= Minimal ITunes installation 10.4.0.80 =
+
= Minimal ITunes installation 10.5.0.142 =
 
The goal of this setup is to get  
 
The goal of this setup is to get  
# a working installation of ITunes which allows you to activate, backup and sync an IPhone or Ipod, download and install new iOS versions and optionally get songs/apps from the Apple Store,  
+
# a working installation of ITunes which allows you to activate, backup and sync an IPhone or Ipod, install new iOS versions and optionally get songs/apps from the Apple Store,  
# but does otherwise interfere with the PC as little as possible. Specifically this means: No Quicktime browser plugins, no Quicktime Java libraries, no automatic update checks, no desktop shortcuts, no automatic file type associations with Quicktime or ITunes, no ITunes CD grabbing, no unecessary background services, no autostart entries, no Quicktime picture viewer, no task icons.
+
# but does otherwise interfere with the PC as little as possible. Specifically this means: No automatic update checks, no desktop shortcuts, no automatic file type associations with ITunes, no ITunes CD grabbing, no unecessary background services or autostart entries, no traybar icons, no Windows firewall modifications.
These package definitions are suited for someone who has to roll out ITunes in a corporate environment because the employees are using IPhones, but otherwise has no use case for ITunes and/or Quicktime at all. Of course all steps in this section is optional, if you don't want to leave a certain feature out, then simply omit the corresponding step.
+
These package definitions are suited for someone who has to roll out ITunes in a corporate environment because the employees are using IPhones, but otherwise has no use case for ITunes at all. Of course all steps in this section is optional, if you don't want to leave a certain feature out, then simply omit the corresponding step.
  
 
== Configuration ==
 
== Configuration ==
Line 156: Line 142:
 
* Open iTunes.msi, select ''New Transform'' from the main menu.
 
* Open iTunes.msi, select ''New Transform'' from the main menu.
 
* Drop the component ''itms.js'' from the table ''Component''. This file is responsible for registering ITunes as a trusted application in Firefox.
 
* Drop the component ''itms.js'' from the table ''Component''. This file is responsible for registering ITunes as a trusted application in Firefox.
* Drop the argument ''Launch_iTunesHelper'' in the table ''ControlEvent''. This prevents iTunesHelper.exe from being started after the setup finishes. ITunes Helper is responsible for automatically starting ITunes when an iPhone or iPod is being connected to the PC.
+
* Drop the actions ''Launch_iTunesHelper'' and ''WixSchedFirewallExceptionsInstall'' from the table ''InstallExecuteSequence''. This prevents iTunesHelper.exe from being started after the setup finishes and ITunes.exe from being added as an internetwide exception to the Windows Firewall. ITunes Helper is responsible for automatically starting ITunes when an iPhone or iPod is being connected to the PC.
 
* Open the table ''Registry'' and drop the keys ''Registry415'' (adds iTunesHelper.exe to the Windows autorun) and ''Registry835'' to ''Registry843'' (adds the ITunes detector plugin to Firefox and other browsers). Of course the registry IDs may change in future ITunes versions, you can instead search for ''CurrentVersion\Run'' and ''MozillaPlugins'' in the column ''Key'' of the ''Registry'' table.
 
* Open the table ''Registry'' and drop the keys ''Registry415'' (adds iTunesHelper.exe to the Windows autorun) and ''Registry835'' to ''Registry843'' (adds the ITunes detector plugin to Firefox and other browsers). Of course the registry IDs may change in future ITunes versions, you can instead search for ''CurrentVersion\Run'' and ''MozillaPlugins'' in the column ''Key'' of the ''Registry'' table.
 
* Drop the file ''ITDetector.ocx'' from the table ''SelfReg''. This prevents the ITunes detector ActiveX component from being registered, which is otherwise added as a plugin to Internet Explorer.
 
* Drop the file ''ITDetector.ocx'' from the table ''SelfReg''. This prevents the ITunes detector ActiveX component from being registered, which is otherwise added as a plugin to Internet Explorer.
 
* Click ''Generate Transform'' and save the resulting file into the same folder as the MSI.
 
* Click ''Generate Transform'' and save the resulting file into the same folder as the MSI.
  
You can disable certain ITunes features via the registry. Apple has a list of almost everything that you can disable: [http://support.apple.com/kb/ht2102 How to manage iTunes control features] (kParentalFlags_DisablePing = 0x00800000 is missing in Apple's list). In the XML code below, only the update check in ITunes is disabled. If you want to disable other features too, look up their hexadecimal numbers at the above link, add them up and write the result as a DWORD value to ''HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default\AdminFlags''. Be aware that you always need to include the "Locked" flag (1) for the settings to take effect.
+
=== Apple Application Support ===
 +
* Open AppleApplicationSupport.msi, select ''New Transform'' from the main menu.
 +
* Drop the action ''WixSchedFirewallExceptionsInstall'' from the table ''InstallExecuteSequence''. This prevents WebKit.dll being added as an internetwide exception to the Windows Firewall.
 +
* Click ''Generate Transform'' and save the resulting file into the same folder as the MSI.
 +
 
 +
You can disable certain ITunes features via the registry. Apple has a list of almost everything that you can disable: [http://support.apple.com/kb/ht2102 How to manage iTunes control features]. In the XML code below, only the update check in ITunes is disabled. If you want to disable other features too, look up their hexadecimal numbers at the above link, add them up and write the result as a DWORD value to ''HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default\AdminFlags''. Be aware that you always need to include the "Locked" flag (1) for the settings to take effect. Also don't forget to change the <check> statement, if you modify the value in the registry.
 +
Be aware that disabling automatic updates in ITunes also stops the user from being able to download updates for Appstore apps in ITunes. Also ITunes does not recognize IPhones in DFU mode anymore. If the registry key for parental controls already exists in the HKCU hive, the ITunes seems to ignore the HKLM entries.
  
 
After ITunes is removed, it does not delete the files in ''%APPDATA%\Apple Computer\iTunes'', ''%USERPROFILE%\Local Settings\Application Data\Apple Computer\iTunes'' and ''%ALLUSERSPROFILE%\Anwendungsdaten\Apple Computer\iTunes''. If you want to remove those directories, you have to specify additional remove commands for WPKG. The same is true for the registry key ''HKCU\Software\Apple Computer, Inc.\iTunes''. The backups of IPhones, songs and applications from the Apple Store are stored outside of those directores!
 
After ITunes is removed, it does not delete the files in ''%APPDATA%\Apple Computer\iTunes'', ''%USERPROFILE%\Local Settings\Application Data\Apple Computer\iTunes'' and ''%ALLUSERSPROFILE%\Anwendungsdaten\Apple Computer\iTunes''. If you want to remove those directories, you have to specify additional remove commands for WPKG. The same is true for the registry key ''HKCU\Software\Apple Computer, Inc.\iTunes''. The backups of IPhones, songs and applications from the Apple Store are stored outside of those directores!
  
=== Quicktime ===
 
* Open QuickTime.msi with Orca, select ''New Transform'' from the main menu.
 
* Edit the table ''FeatureComponents'' and drop the component ''QuickTimeEssentials.qtx''. This gets rid of the installation of the Quicktime Firefox plugin. The rationale behind this is that the Quicktime plugin is of almost no use anymore because hardly anyone except Apple embeds Quicktime media files into websites. However nowadays one of the main attack vectors and primary source of drive-by installs are security holes in webbrowser plugins (for example ITunes 10.0 contained a Quicktime version that has two known and highly critical security holes [http://secunia.com/advisories/41123/ #1] [http://secunia.com/advisories/41213/ #2]). Therefore it is strongly advisable to install as few plugins as possible.
 
* Drop the condition ''NOT BNEWERPRODUCTISINSTALLED'' from the ''LaunchCondition'' table. This allows you the roll out the MSI via WPKG even if the user already installed a newer version of Quicktime manually.
 
* Click ''Generate Transform'' and save the resulting file into the same folder as the MSI.
 
 
Besides the periodic update checks via ''Apple Software Update'', Quicktime additionally performs update checks on its own when you launch it. To disable that behaviour install Quicktime on a test computer, delete the file ''%USERPROFILE%\Local Settings\Application Data\Apple Computer\QuickTime\QuickTime.qtp'' if it exists (adapt the path to your locale), then open the Quicktime settings in the Windows control panel, go to ''Update'', uncheck ''Check for updates automatically'' and click OK. Now copy the recreated file ''%USERPROFILE%\Local Settings\Application Data\Apple Computer\QuickTime\QuickTime.qtp'' (should be below 1kB) to ''%SOFTWARE%\itunes''. To deploy this file the package quicktimesettings is used. It copies ''QuickTime.qtp'' into ''%ALLUSERSPROFILE%\Application Data\Apple Computer\QuickTime'' and adds a registry key ''HKLM\SOFTWARE\Apple Computer, Inc.\QuickTime\LocalUserPreferences\FolderPath'' which points to this directory. '''Caution:''' Quicktime only checks that registry key if the key ''HKCU\SOFTWARE\Apple Computer, Inc.\QuickTime\LocalUserPreferences'' does not exist! If Quicktime is or was ever run without the HKLM-key present, it automatically creates the HKCU-key and then never checks the HKLM-key again.
 
 
After Quicktime is removed, it does not delete the files in ''%APPDATA%\Apple Computer\QuickTime'', ''%USERPROFILE%\Local Settings\Application Data\Apple Computer\QuickTime'' and ''%ALLUSERSPROFILE%\Application Data\Apple Computer\QuickTime''. If you want to remove those directories, you have to specify additional remove commands for WPKG. The same is true for the registry key ''HKCU\Software\Apple Computer, Inc.\QuickTime''.
 
  
 
== Package definitions ==
 
== Package definitions ==
=== Apple Application Support and Apple Mobile Device Support ===
+
=== Apple Mobile Device Support ===
Copy the package definitions from the full ITunes installation above and use the original MSI files as extracted from iTunesSetup.exe. These packages don't require any modifications.
+
Copy the package definition from the full ITunes installation above and use the original MSI files as extracted from iTunesSetup.exe. These packages don't require any modifications.
  
=== ITunes ===
+
=== Apple Application Support ===
 
<source lang="xml">
 
<source lang="xml">
 
<?xml version="1.0" encoding="UTF-8"?>
 
<?xml version="1.0" encoding="UTF-8"?>
<package id='itunes' name='Apple iTunes' revision='10.4.0.80' reboot='false' priority='1'>
+
<package id='appleapplicationsupport' name='Apple Application Support' revision='%PKGVER%' reboot='false' priority='10'>
<depends package-id='appleapplicationsupport' />
+
<variable name='PKGVER' value='2.1.5' />
<depends package-id='quicktime' />
+
  
<check type='uninstall' condition='exists' path='iTunes' />
+
<check type='uninstall' condition='versiongreaterorequal' path='Apple Application Support' value='%PKGVER%'/>
<check type='file' condition='versiongreaterorequal' path='%PROGRAMFILES%\iTunes\iTunes.exe' value='10.4.0.80' />
+
+
<install cmd='msiexec /i "%SOFTWARE%\itunes\AppleApplicationSupport.msi" TRANSFORMS="%TEMP%\software\application-transform-from-above.mst" /passive /norestart' timeout='300'>
<!-- DESKTOP_SHORTCUTS=0: Don't create desktop shortcuts
+
MEDIA_DEFAULTS=0: Don't make ITunes the default program for Audio CDs and various audio filetypes
+
SCHEDULE_ASUW=0: Don't create a scheduled task to automatically search for ITunes updates
+
REENABLEAUTORUN=0: Don't try to re-enable Windows autorun feature for CDs
+
OUTLOOK_LOAD_BEHAVIOR=0: Don't load ITunes-Calendar-Addin in Outlook -->
+
<install cmd='msiexec.exe /i "%SOFTWARE%\itunes\iTunes.msi" TRANSFORMS="%SOFTWARE%\itunes\itunes-transform-from-above.mst" DESKTOP_SHORTCUTS=0 MEDIA_DEFAULTS=0 SCHEDULE_ASUW=0 REENABLEAUTORUN=0 OUTLOOK_LOAD_BEHAVIOR=0 /passive /norestart' timeout='300'>
+
 
<exit code='0' />
 
<exit code='0' />
 
<exit code='3010' reboot='postponed' />
 
<exit code='3010' reboot='postponed' />
 
</install>
 
</install>
<!-- Disable update feature in ITunes via parental controls -->
+
 
<install cmd='reg add "HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default" /v "AdminFlags" /t REG_DWORD /d "0x101" /f' timeout='60' />
+
<upgrade cmd='msiexec /i "%SOFTWARE%\itunes\AppleApplicationSupport.msi" TRANSFORMS="%TEMP%\software\application-transform-from-above.mst" /passive /norestart' timeout='300'>
+
<upgrade cmd='msiexec.exe /i "%SOFTWARE%\itunes\iTunes.msi" TRANSFORMS="%SOFTWARE%\itunes\itunes-transform-from-above.mst" DESKTOP_SHORTCUTS=0 MEDIA_DEFAULTS=0 SCHEDULE_ASUW=0 REENABLEAUTORUN=0 OUTLOOK_LOAD_BEHAVIOR=0 /passive /norestart'>
+
 
<exit code='0' />
 
<exit code='0' />
 
<exit code='3010' reboot='postponed' />
 
<exit code='3010' reboot='postponed' />
 
</upgrade>
 
</upgrade>
<upgrade cmd='reg add "HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default" /v "AdminFlags" /t REG_DWORD /d "0x101" /f' timeout='60' />
+
+
<remove cmd='msiexec /x{A83279FD-CA4B-4206-9535-90974DE76654} /passive /norestart' timeout='300'>
<remove cmd='msiexec.exe /x{C73CA646-73B3-4AEF-A136-C37505745174} /passive /norestart' timeout='300'>
+
 
<exit code='0' />
 
<exit code='0' />
 
<exit code='1605' />
 
<exit code='1605' />
Line 215: Line 188:
 
</source>
 
</source>
  
=== Quicktime ===
+
=== ITunes ===
The Quicktime installer package is grouped into multiple features (categories). For reasons that are left to the imagination of the reader, Apple prevents the user from deselecting any of those features through the GUI. However by using the ''ADDLOCAL'' switch, it is possible to specify which features should be installed. To use the audio and video playback capabilites of Quicktime, only the feature ''QuickTimeEssentials'' is necessary.
+
The other features as of version 7.70 are: QuickTimeInternet, QuickTimeImage, QuickTimeEffects, QuickTimeMusic, QuickTimeAuthoring, QuickTimeCapture, QuickTimeForJava, QuickTimeProResDecoder. None of them is necessary to run ITunes, therefore they are all excluded. Be aware that ''QuickTimeInternet'' includes the Quicktime plugin for the Internet Explorer (see above for possible security implications when installing this feature).
+
 
+
Do not use Quicktime 7.69.80.9 which is bundled in the installation package of Itunes 10.4.0.80 because it contains [http://support.apple.com/kb/HT4826 known security flaws]
+
 
<source lang="xml">
 
<source lang="xml">
 
<?xml version="1.0" encoding="UTF-8"?>
 
<?xml version="1.0" encoding="UTF-8"?>
<package id='quicktime' name='Apple QuickTime' revision='7.70.80.34' reboot='false' priority='2'>
+
<package id='itunes' name='Apple iTunes' revision='%PKGVER%' reboot='false' priority='1'>
<chain package-id='quicktimesettings' />
+
<depends package-id='appleapplicationsupport' />
 +
 
 +
<variable name='PKGVER' value='10.5.0.142' />
 +
 
 +
<check type='uninstall' condition='versiongreaterorequal' path='iTunes' value='%PKGVER%' />
 +
<check type='registry' condition='equals' path='HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default\AdminFlags' value='257' />
 
 
<check type='uninstall' condition='exists' path='QuickTime' />
+
<!-- DESKTOP_SHORTCUTS=0: Don't create desktop shortcuts
<check type='file' condition='versiongreaterorequal' path='%PROGRAMFILES%\QuickTime\QuickTimePlayer.exe' value='7.70.80.34' />
+
MEDIA_DEFAULTS=0: Don't make ITunes the default program for Audio CDs and various audio filetypes
+
SCHEDULE_ASUW=0: Don't create a scheduled task to automatically search for ITunes updates
<!-- ADDLOCAL=QuickTimeEssentials: Only install the main feature of Quicktime -->
+
REENABLEAUTORUN=0: Don't try to re-enable Windows autorun feature for CDs
<install cmd='msiexec /i "%SOFTWARE%\itunes\QuickTime.msi" TRANSFORMS="%SOFTWARE%\itunes\quicktime-transform-from-above.mst" ADDLOCAL=QuickTimeEssentials DESKTOP_SHORTCUTS=0 SCHEDULE_ASUW=0 /passive /norestart' timeout='300'>
+
OUTLOOK_LOAD_BEHAVIOR=0: Don't load ITunes-Calendar-Addin in Outlook -->
 +
<install cmd='msiexec.exe /i "%SOFTWARE%\itunes\iTunes.msi" TRANSFORMS="%SOFTWARE%\itunes\itunes-transform-from-above.mst" DESKTOP_SHORTCUTS=0 MEDIA_DEFAULTS=0 SCHEDULE_ASUW=0 REENABLEAUTORUN=0 OUTLOOK_LOAD_BEHAVIOR=0 /passive /norestart' timeout='300'>
 
<exit code='0' />
 
<exit code='0' />
 
<exit code='3010' reboot='postponed' />
 
<exit code='3010' reboot='postponed' />
 
</install>
 
</install>
+
<!-- Disable update feature in ITunes via parental controls -->
<upgrade cmd='msiexec /i "%SOFTWARE%\itunes\QuickTime.msi" TRANSFORMS="%SOFTWARE%\itunes\quicktime-transform-from-above.mst" ADDLOCAL=QuickTimeEssentials DESKTOP_SHORTCUTS=0 SCHEDULE_ASUW=0 /passive /norestart' timeout='300'>
+
<install cmd='reg add "HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default" /v "AdminFlags" /t REG_DWORD /d "0x101" /f' timeout='60' />
 +
 +
<upgrade cmd='msiexec.exe /i "%SOFTWARE%\itunes\iTunes.msi" TRANSFORMS="%SOFTWARE%\itunes\itunes-transform-from-above.mst" DESKTOP_SHORTCUTS=0 MEDIA_DEFAULTS=0 SCHEDULE_ASUW=0 REENABLEAUTORUN=0 OUTLOOK_LOAD_BEHAVIOR=0 /passive /norestart'>
 
<exit code='0' />
 
<exit code='0' />
 
<exit code='3010' reboot='postponed' />
 
<exit code='3010' reboot='postponed' />
 
</upgrade>
 
</upgrade>
 +
<upgrade cmd='reg add "HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default" /v "AdminFlags" /t REG_DWORD /d "0x101" /f' timeout='60' />
 
 
<remove cmd='msiexec /x{C9E14402-3631-4182-B377-6B0DFB1C0339} /passive /norestart' timeout='300'>
+
<remove cmd='msiexec.exe /x{29ED20C9-5E15-4969-9279-25BF3727A3DA} /passive /norestart' timeout='300'>
 
<exit code='0' />
 
<exit code='0' />
 
<exit code='1605' />
 
<exit code='1605' />
Line 245: Line 223:
 
</remove>
 
</remove>
 
</package>
 
</package>
 
<package id='quicktimesettings' name='Apple QuickTime settings' revision='1' notify='false' reboot='false' priority='1'>
 
<!-- Adapt the paths to your locale -->
 
<check type='registry' condition='equals' path='HKLM\SOFTWARE\Apple Computer, Inc.\QuickTime\LocalUserPreferences\FolderPath' value='C:\Documents and Settings\All Users\Application Data\Apple Computer\QuickTime\' />
 
<check type='file' condition='exists' path='%ALLUSERSPROFILE%\Application Data\Apple Computer\QuickTime\QuickTime.qtp' />
 
 
<install cmd='%COMSPEC% /C if exist "%ALLUSERSPROFILE%\Application Data" xcopy /y /v "%SOFTWARE%\itunes\QuickTime.qtp" "%ALLUSERSPROFILE%\Application Data\Apple Computer\QuickTime\"' timeout='60' />
 
<install cmd='%COMSPEC% /C if exist "%ALLUSERSPROFILE%\Application Data" reg.exe add "HKLM\SOFTWARE\Apple Computer, Inc.\QuickTime\LocalUserPreferences" /v "FolderPath" /d "%ALLUSERSPROFILE%\Application Data\Apple Computer\QuickTime\\" /f' timeout='60' />
 
 
<upgrade cmd='%COMSPEC% /C if exist "%ALLUSERSPROFILE%\Application Data" xcopy /y /v "%SOFTWARE%\itunes\QuickTime.qtp" "%ALLUSERSPROFILE%\Application Data\Apple Computer\QuickTime\"' timeout='60' />
 
<upgrade cmd='%COMSPEC% /C if exist "%ALLUSERSPROFILE%\Application Data" reg.exe add "HKLM\SOFTWARE\Apple Computer, Inc.\QuickTime\LocalUserPreferences" /v "FolderPath" /d "%ALLUSERSPROFILE%\Application Data\Apple Computer\QuickTime\\" /f' timeout='60' />
 
 
<remove cmd='%COMSPEC% /C del "%ALLUSERSPROFILE%\Application Data\Apple Computer\QuickTime\QuickTime.qtp"' timeout='60'>
 
<exit code='0' />
 
<exit code='1' />
 
</remove>
 
<remove cmd='reg.exe delete "HKLM\SOFTWARE\Apple Computer, Inc.\QuickTime\LocalUserPreferences" /f' timeout='60'>
 
<exit code='0' />
 
<exit code='1' />
 
</remove>
 
</package>
 
 
 
</source>
 
</source>
 
= External Links =
 
* [http://www.zdnet.com/blog/bott/the-unofficial-guide-to-installing-itunes-10-without-bloatware/2390 The unofficial guide to installing iTunes 10 without bloatware] on zdnet.com by By Ed Bott 
 
  
 
[[Category:Silent Installers]]
 
[[Category:Silent Installers]]

Revision as of 16:19, 13 October 2011

General Information

Apple iTunes is primarily a program to play different types of media, but it is also required if you want to backup an IPhone or sync your emails, notes, bookmarks etc over USB with your PC. ITunes comes bundled with multiple sub programs that are all automatically installed when running the regular ITunes setup wizard. However depending on your use case you don't actually need all of them. Therefore this page is divided into two subparts: On the one hand a full blown ITunes installation (excluding Apple Software Update) when you actually want to use ITunes as an audio and video player, podcast streamer, etc and on the other hand a minimal ITunes installation if you only want to use it to sync/backup an IPhone.

ITunes is one of the programs that are more difficult to package, since Apple is using it as a vehicle to distribute their other software. To get rid of at least some of those "extra" programs additional configuration steps are necessary to perform. Please read the instructions carefully, because some things here dont work as you would assume. Don't blindly copy and paste the XML code.

Pre-Setup Process

The ITunes installer consists of multiple MSI packages for each of its sub programs and a runtime that executes those MSI packages one after the other. To extract the MSI files do the following:

  • Download the ITunes setup file from Apple (usually called iTunesSetup.exe)
  • Open the file with 7zip or another file archiver
  • Extract iTunes.msi, AppleApplicationSupport.msi and AppleMobileDeviceSupport.msi

Notes

  • Starting with ITunes version 10.5, Quicktime is not part of the setup package anymore and also not necessary any longer to run ITunes. The installation instructions were therefore removed from this page.
  • Apple Mobile Device Support is only necessary if you want to connect an Ipod or IPhone. Apple Application Support is mandatory to be able to run ITunes.
  • Each sub-application has its own version. When a new version for ITunes comes out, you will need to extract the MSI packages from the EXE installer, right click on the MSI files and check their version to see which sub-applications have updated. Each sub-applications has its own WPKG package definition with separate install, upgrade and uninstall commands.
  • To also get the latest available version of Apple Application Support you'll have to download every installer from the Apple website and check which one contains the latest version of the Apple Application Support.
  • Apple sometimes updates the MSI packages inside the EXE installer without changing the version number on the website. So do not take it for granted that there are no new packages available just because the version number on the website is still the same.
  • Apple is also known to sometimes modify the setup packages of their programs even at minor version changes, so do not blindly assume that a new ITunes installer will work the same way as the old one did!
  • There is a 64bit version of ITunes available too. As of version 10.5.0.142 the 64bit installer contains 64bit versions of ITunes itself and Apple Mobile Device Support and 32bit versions of Apple Application Support. The package definitions for the 64bit versions look basically the same as below, just the paths and GUIDs are different.

Full iTunes 10.4.0.80 installation in VBS

' Directory folder %Software\iTunes, the script requires that the *.vbs file is located the same place as all *.msi files. If you have SCCM, you can distribute this script as a package.

Set WshShell = WScript.CreateObject("WScript.Shell") 
Set objFSO = CreateObject("Scripting.FileSystemObject") 
strScriptFileDirectory = objFSO.GetParentFolderName(wscript.ScriptFullName) 

' Create Transform for iTunes with orca or another msi editor, to make iTunes more "admin" friendly for distribution in company networks. A "how to" is discribed under the item iTunes.

WshShell.Run "msiexec /I AppleApplicationSupport.msi /q /norestart", 0, true
WshShell.Run "msiexec /I Bonjour.msi /q /norestart", 0, true
WshShell.Run "msiexec /I AppleMobileDeviceSupport.msi /q /norestart", 0, true
WshShell.Run "msiexec /I itunes.msi TRANSFORMS=itunes.mst /q /norestart", 0, true
WshShell.Run "msiexec /I quicktime.msi DESKTOP_SHORTCUTS=0 SCHEDULE_ASUW=0 REENABLEAUTORUN=0 /q /norestart", 0, true

' set parental controls, that disables "Run first welcome window", "Cannot change parental controls" and "No autoupdate"

Dim wshShell
Set wshShell = CreateObject( "WScript.Shell" )
wshShell.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default\AdminFlags", 16777473, "REG_DWORD"


'Copy this to notepad++ or anoter editor, save as *.vbs :-)

Full ITunes installation 10.5.0.142

If you update this code, please remember the uninstall GUIDs change on each new version installed!

Deploy File/Folder Structure

 %SOFTWARE%\itunes\iTunes.msi
 %SOFTWARE%\itunes\AppleMobileDeviceSupport.msi
 %SOFTWARE%\itunes\AppleApplicationSupport.msi
<?xml version="1.0" encoding="UTF-8"?>
<package id='appleapplicationsupport' name='Apple Application Support' revision='%PKGVER%' reboot='false' priority='10'>
	<variable name='PKGVER' value='2.1.5' />

	<check type='uninstall' condition='versiongreaterorequal' path='Apple Application Support' value='%PKGVER%'/>
 
	<install cmd='msiexec /i "%SOFTWARE%\itunes\AppleApplicationSupport.msi" /passive /norestart' timeout='300'>
		<exit code='0' />
		<exit code='3010' reboot='postponed' />
	</install>

	<upgrade cmd='msiexec /i "%SOFTWARE%\itunes\AppleApplicationSupport.msi" /passive /norestart' timeout='300'>
		<exit code='0' />
		<exit code='3010' reboot='postponed' />
	</upgrade>
 
	<remove cmd='msiexec /x{A83279FD-CA4B-4206-9535-90974DE76654} /passive /norestart' timeout='300'>
		<exit code='0' />
		<exit code='1605' />
		<exit code='3010' reboot='postponed' />
	</remove>
</package>

<package id='applemobilesupport' name='Apple Mobile Device Support' revision='%PKGVER%' reboot='false' priority='10'>
	<variable name='PKGVER' value='4.0.0.96' />

	<check type='uninstall' condition='versiongreaterorequal' path='Apple Mobile Device Support' value='%PKGVER%' />
 
	<install cmd='msiexec /i "%SOFTWARE%\itunes\AppleMobileDeviceSupport.msi" /passive /norestart' timeout='300'>
		<exit code='0' />
		<exit code='3010' reboot='postponed' />
	</install>
 
	<upgrade cmd='msiexec /i "%SOFTWARE%\itunes\AppleMobileDeviceSupport.msi" /passive /norestart' timeout='300'>
		<exit code='0' />
		<exit code='3010' reboot='postponed' />
	</upgrade>

	<remove cmd='msiexec /x{A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21} /passive /norestart' timeout='300'>		
		<exit code='0' />
		<exit code='1605' />
		<exit code='3010' reboot='postponed' />
	</remove>
</package>

<package id='itunes' name='Apple iTunes' revision='%PKGVER%' reboot='false' priority='9'>
	<depends package-id='appleapplication' />

	<variable name='PKGVER' value='10.5.0.142' />

	<check type='uninstall' condition='versiongreaterorequal' path='iTunes' value='%PKGVER%' />
	<!-- Check if automatic updates have been disabled (value: 256) and settings have been locked (value: 1) -->
	<check type='registry' condition='equals' path='HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default\AdminFlags' value='257' />
 
	<install cmd='msiexec.exe /i "%SOFTWARE%\itunes\iTunes.msi" SCHEDULE_ASUW=0 /passive' timeout='300'>
		<exit code='0' />
		<exit code='3010' reboot='postponed' />
	</install>
	<!-- Disable automatic update of ITunes via parental controls and lock the settings, see below for more info -->
	<install cmd='reg add "HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default" /v "AdminFlags" /t REG_DWORD /d "0x101" /f' timeout='60' />
 
	<upgrade cmd='msiexec.exe /i "%SOFTWARE%\itunes\iTunes.msi" SCHEDULE_ASUW=0 /passive' timeout='300'>
		<exit code='0' />
		<exit code='3010' reboot='postponed' />
	</upgrade>
	<upgrade cmd='reg add "HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default" /v "AdminFlags" /t REG_DWORD /d "0x101" /f' timeout='60' />
 
	<remove cmd='msiexec.exe /x{29ED20C9-5E15-4969-9279-25BF3727A3DA} /passive /norestart' timeout='300'>
		<exit code='0' />
		<exit code='1605' />
		<exit code='3010' reboot='postponed' />
	</remove>
</package>

Minimal ITunes installation 10.5.0.142

The goal of this setup is to get

  1. a working installation of ITunes which allows you to activate, backup and sync an IPhone or Ipod, install new iOS versions and optionally get songs/apps from the Apple Store,
  2. but does otherwise interfere with the PC as little as possible. Specifically this means: No automatic update checks, no desktop shortcuts, no automatic file type associations with ITunes, no ITunes CD grabbing, no unecessary background services or autostart entries, no traybar icons, no Windows firewall modifications.

These package definitions are suited for someone who has to roll out ITunes in a corporate environment because the employees are using IPhones, but otherwise has no use case for ITunes at all. Of course all steps in this section is optional, if you don't want to leave a certain feature out, then simply omit the corresponding step.

Configuration

Not all necessary changes to the setup packages can be made at the command line level, therefore the MSI files have to be modified. For this the Microsoft tool Orca (freeware) is necessary. If you don't have Orca yet, download it from Microsoft.

ITunes

  • Open iTunes.msi, select New Transform from the main menu.
  • Drop the component itms.js from the table Component. This file is responsible for registering ITunes as a trusted application in Firefox.
  • Drop the actions Launch_iTunesHelper and WixSchedFirewallExceptionsInstall from the table InstallExecuteSequence. This prevents iTunesHelper.exe from being started after the setup finishes and ITunes.exe from being added as an internetwide exception to the Windows Firewall. ITunes Helper is responsible for automatically starting ITunes when an iPhone or iPod is being connected to the PC.
  • Open the table Registry and drop the keys Registry415 (adds iTunesHelper.exe to the Windows autorun) and Registry835 to Registry843 (adds the ITunes detector plugin to Firefox and other browsers). Of course the registry IDs may change in future ITunes versions, you can instead search for CurrentVersion\Run and MozillaPlugins in the column Key of the Registry table.
  • Drop the file ITDetector.ocx from the table SelfReg. This prevents the ITunes detector ActiveX component from being registered, which is otherwise added as a plugin to Internet Explorer.
  • Click Generate Transform and save the resulting file into the same folder as the MSI.

Apple Application Support

  • Open AppleApplicationSupport.msi, select New Transform from the main menu.
  • Drop the action WixSchedFirewallExceptionsInstall from the table InstallExecuteSequence. This prevents WebKit.dll being added as an internetwide exception to the Windows Firewall.
  • Click Generate Transform and save the resulting file into the same folder as the MSI.

You can disable certain ITunes features via the registry. Apple has a list of almost everything that you can disable: How to manage iTunes control features. In the XML code below, only the update check in ITunes is disabled. If you want to disable other features too, look up their hexadecimal numbers at the above link, add them up and write the result as a DWORD value to HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default\AdminFlags. Be aware that you always need to include the "Locked" flag (1) for the settings to take effect. Also don't forget to change the <check> statement, if you modify the value in the registry. Be aware that disabling automatic updates in ITunes also stops the user from being able to download updates for Appstore apps in ITunes. Also ITunes does not recognize IPhones in DFU mode anymore. If the registry key for parental controls already exists in the HKCU hive, the ITunes seems to ignore the HKLM entries.

After ITunes is removed, it does not delete the files in %APPDATA%\Apple Computer\iTunes, %USERPROFILE%\Local Settings\Application Data\Apple Computer\iTunes and %ALLUSERSPROFILE%\Anwendungsdaten\Apple Computer\iTunes. If you want to remove those directories, you have to specify additional remove commands for WPKG. The same is true for the registry key HKCU\Software\Apple Computer, Inc.\iTunes. The backups of IPhones, songs and applications from the Apple Store are stored outside of those directores!


Package definitions

Apple Mobile Device Support

Copy the package definition from the full ITunes installation above and use the original MSI files as extracted from iTunesSetup.exe. These packages don't require any modifications.

Apple Application Support

<?xml version="1.0" encoding="UTF-8"?>
<package id='appleapplicationsupport' name='Apple Application Support' revision='%PKGVER%' reboot='false' priority='10'>
	<variable name='PKGVER' value='2.1.5' />

	<check type='uninstall' condition='versiongreaterorequal' path='Apple Application Support' value='%PKGVER%'/>
 
	<install cmd='msiexec /i "%SOFTWARE%\itunes\AppleApplicationSupport.msi" TRANSFORMS="%TEMP%\software\application-transform-from-above.mst" /passive /norestart' timeout='300'>
		<exit code='0' />
		<exit code='3010' reboot='postponed' />
	</install>

	<upgrade cmd='msiexec /i "%SOFTWARE%\itunes\AppleApplicationSupport.msi" TRANSFORMS="%TEMP%\software\application-transform-from-above.mst" /passive /norestart' timeout='300'>
		<exit code='0' />
		<exit code='3010' reboot='postponed' />
	</upgrade>
 
	<remove cmd='msiexec /x{A83279FD-CA4B-4206-9535-90974DE76654} /passive /norestart' timeout='300'>
		<exit code='0' />
		<exit code='1605' />
		<exit code='3010' reboot='postponed' />
	</remove>
</package>

ITunes

<?xml version="1.0" encoding="UTF-8"?>
<package id='itunes' name='Apple iTunes' revision='%PKGVER%' reboot='false' priority='1'>
	<depends package-id='appleapplicationsupport' />

	<variable name='PKGVER' value='10.5.0.142' />

	<check type='uninstall' condition='versiongreaterorequal' path='iTunes' value='%PKGVER%' />
	<check type='registry' condition='equals' path='HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default\AdminFlags' value='257' />
	
	<!-- DESKTOP_SHORTCUTS=0: Don't create desktop shortcuts
	MEDIA_DEFAULTS=0: Don't make ITunes the default program for Audio CDs and various audio filetypes
	SCHEDULE_ASUW=0: Don't create a scheduled task to automatically search for ITunes updates
	REENABLEAUTORUN=0: Don't try to re-enable Windows autorun feature for CDs 
	OUTLOOK_LOAD_BEHAVIOR=0: Don't load ITunes-Calendar-Addin in Outlook -->
	<install cmd='msiexec.exe /i "%SOFTWARE%\itunes\iTunes.msi" TRANSFORMS="%SOFTWARE%\itunes\itunes-transform-from-above.mst" DESKTOP_SHORTCUTS=0 MEDIA_DEFAULTS=0 SCHEDULE_ASUW=0 REENABLEAUTORUN=0 OUTLOOK_LOAD_BEHAVIOR=0 /passive /norestart' timeout='300'>
		<exit code='0' />
		<exit code='3010' reboot='postponed' />
	</install>
	<!-- Disable update feature in ITunes via parental controls -->
	<install cmd='reg add "HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default" /v "AdminFlags" /t REG_DWORD /d "0x101" /f' timeout='60' />
	
	<upgrade cmd='msiexec.exe /i "%SOFTWARE%\itunes\iTunes.msi" TRANSFORMS="%SOFTWARE%\itunes\itunes-transform-from-above.mst" DESKTOP_SHORTCUTS=0 MEDIA_DEFAULTS=0 SCHEDULE_ASUW=0 REENABLEAUTORUN=0 OUTLOOK_LOAD_BEHAVIOR=0 /passive /norestart'>
		<exit code='0' />
		<exit code='3010' reboot='postponed' />
	</upgrade>
	<upgrade cmd='reg add "HKLM\SOFTWARE\Apple Computer, Inc.\iTunes\Parental Controls\Default" /v "AdminFlags" /t REG_DWORD /d "0x101" /f' timeout='60' />
	
	<remove cmd='msiexec.exe /x{29ED20C9-5E15-4969-9279-25BF3727A3DA} /passive /norestart' timeout='300'>
		<exit code='0' />
		<exit code='1605' />
		<exit code='3010' reboot='postponed' />
	</remove>
</package>